Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
Atlassian · Confluence Server
Date added (CISA)
2022-03-28
Remediation due
2022-04-18
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.